Expedition Discussions
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Expedition Discussions

Discussions

Resolved! ML gets stuck at "Pending"

I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...

Untitled.png
mbowling by L1 Bithead
  • 46181 Views
  • 26 replies
  • 3 Likes

If You Need an OVA...

I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...

trice by L1 Bithead
  • 73065 Views
  • 46 replies
  • 23 Likes

Resolved! How to Upload configuration files bigger than 2MB

Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...

alestevez by L7 Applicator
  • 30134 Views
  • 5 replies
  • 11 Likes

Resolved! Best practice when uploads CP configuration in Expedition

Hi, I need to migrate from CP 80.40 to PANOS 10.1.8. Generally, Checkpoint NAT behaves the same way as NAT in PAN-OS. For this reason, my question, it is a best practice when we uploaded the CP config to expedition enable this option?  Option A: do not modify Destination Address in NAT related security policies

CP_upload_config.jpg
Apadilla by L3 Networker
  • 2657 Views
  • 2 replies
  • 0 Likes

Fortinet Migration - Internet Services Database objects conversion to Palo Alto

Hi A Fortigate firewall uses Fortinet 'Internet Services' objects. There are many of them, they are predefined and some of them contain several tens of thousands of IP addresses (Amazon-AWS object, for example currently contains 75114 objects, there are various objects for Microsoft services, Adobe services, etc). Expedition tool converts those ...

Gordan by L0 Member
  • 5827 Views
  • 1 replies
  • 0 Likes

Can not access to Web UI of ExpeditionVM

Hi all, need to help me!!! This is the first time, I downloaded ExpeditionVM form EXPEDITION RESOURCES on LIVEcommunity. After, I import to my VMWare Workstation with Network Adapter as pic: I login ExpeditionVM and run: apt-get update/ install -> OK Then, I check IP of ExpeditionVM and my laptop's IP address as pic: But, when I access t...

ThomasX_0-1623494440557.jpeg
ThomasX_1-1623494598201.jpeg
ThomasX by L1 Bithead
  • 7536 Views
  • 8 replies
  • 1 Likes

Resolved! Palo Alto Expedition 1.2.46 move virtual router to different vsys

How can you move a virtual router to a different vsys? I imported the config of my Panorama with 3 different vsys. Now I import the config of my Juniper SRX firewall and want to assign my virtual router to vsys3, there is no button to change it to vsys3? It puts it default in vsys1, I can also not change it by the export tab because in the n...

Expedition 2.0

Is anyone else trying to wait patiently for expedition 2.0? I was hoping it would be released in time for ignite, but I guess not.

Importing an SRX config

Having imported an SRX config to Expedition, we appear to have rendered all the st0.x 'secure tunnel interfaces' in the SRX config as 'tunnel.x' in the interface section of the config but, in the virtaul router, static routes continue to reference to st0.x.Is that what we expect ?Simply a matter of re-wriiting the static routes ?

Resolved! Unable to create Log Connector

Expedition 1.1.69.3 I have created a new project and I'm unable to create a Log Connector. After Selecting my Device, I click the dropdown for Source and it's blank. Selecting the dropdown for Virtual System is also blank. Alternately if I create a Dynamic Log Connector and then try to analyze ML data, the connector cannot be found. ...

2020-06-12 08_49_41-Expedition Project.png
2020-06-12 08_50_57-Expedition Project.png
markmill by L2 Linker
  • 6429 Views
  • 6 replies
  • 0 Likes

PAN base config repository somewhere?

Hey all - I am wanting to do a training session with my team ahead of getting some 850's installed for satellite locations. I don't have an 850 laying around to grab a base config off of in advance - does anyone know if there is a repository out there somewhere that I could download an XML from for any particular model (Just for the initial tra...

AppID Adoption not working for PAN-OS 10.2.3 or 11.0 w/ Expedition 1.2.45

Expedition 1.2.45 on Ubuntu 20.02 I am unable to "retrieve apps (fast)" on a vm-series firewall running 10.2.3 or 11.0. It gets stuck on "generating reports" at the bottom of the screen. For comparison, I fired up a new project with a pa200 and the exact same process works as expected. Appreciate any assistance and happy to provide logfi...

Cisco Firepower to Palo Alto NGFW migration

Hello Folks, I am planning to migrate Cisco firepower to Palo Alto NGFW. As per this article https://live.paloaltonetworks.com/t5/expedition-discussions/can-expedition-migration-cisco-fire-power-to-palo-alto/m-p/289423#M2018Showing unable to migrate policies. So Could you please share the step-by-step best way to do this migration? Sharing i...

Resolved! Preparing PA-440 for connection with Expedition

Greetings from a PA/Expedition noob... My end result is to migrate from a Cisco ASA 5505 to a PA-440. So... I've got VMware Workstation Player (VMWP) installed on a spare Win 10 pc; I've got Ubuntu server 20.04 instance (UBS) installed in the VMWP; I've got the latest Expedition installed into the UBS; I can launch Chrome on the Win 10 PC an...

Resolved! can't complete installation

I am following the install procedure found at the below link, and I am stuck on page 15 where it asks me to issue the command /tmp$sudo ./initSetup_v2.0.sh However, it doesn't ask me for a password like the instruction says. It does display the WELCOME message and below text. No LSB modules are available. This script has been prepared fo...

Juniper Migrations IPSEC

has anyone been able to successully migrate juniper ver 12.1XXX ipsec configuration to palo alto using the migration tool? All security rules and interfaces migrate over just not the ipsec config.

Porfirio by L1 Bithead
  • 5012 Views
  • 4 replies
  • 0 Likes
  • 1185 Posts
  • 89 Subscriptions
Labels